๐บ๐ธ
wbsouza
2026-09-01 03:21:30
(4 hours ago)
CrowdSec: infra/bad-path-probe โ automated firewall drops on self-hosted IDS sensor
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-08-31 21:59:10
(10 hours ago)
Auto-ban: >3000 req/min op 2026-08-31
Web App Attack
SSH
Hacking
๐ฉ๐ช
on-com
2026-08-31 20:53:48
(11 hours ago)
URL scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 20:33:43
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.245.179.127 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.245.179.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 16:33:36.707622 2026] [security2:error] [pid 8639:tid 8639] [client 165.245.179.127:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "api.nsfwmanager.com"] [uri "/.git/config"] [unique_id "apXlIN3D9hTwRJeGFoc-VgAAAAc"], referer: http://api.nsfwmanager.com/.git/config
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Niko's Stuff
2026-08-31 20:19:16
(11 hours ago)
Triggered crowdsecurity/CVE-2017-9841. More information at: https://app.crowdsec.net/cti/165.245.179 ...
show more
Triggered crowdsecurity/CVE-2017-9841. More information at: https://app.crowdsec.net/cti/165.245.179.127
show less
Web App Attack
๐ฆ๐บ
aranguren.org
2026-08-31 17:51:14
(14 hours ago)
165.245.179.127 - - [01/Sep/2026:03:51:12 +1000] "GET /.git/config HTTP/1.1" 404 993 "-" "Mozilla/5. ...
show more
165.245.179.127 - - [01/Sep/2026:03:51:12 +1000] "GET /.git/config HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
165.245.179.127 - - [01/Sep/2026:03:51:14 +1000] "GET /.git/config HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
165.245.179.127 - - [01/Sep/2026:03:51:14 +1000] "GET /.git/config HTTP/1.1" 404 1152 "https://api.luisaranguren.com/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฎ๐น
mgarofano80
2026-08-31 16:16:44
(15 hours ago)
Brute-Force
Web App Attack
๐ฉ๐ช
JLKnoch Software GmbH
2026-08-31 15:50:33
(16 hours ago)
CrowdSec crowdsecurity/http-probing
Brute-Force
Web App Attack
๐ธ๐ฌ
Cloudkul Cloudkul
2026-08-31 02:54:59
(1 day ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 02:40:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 165.245.179.127 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.245.179.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 22:40:49.577253 2026] [security2:error] [pid 4045:tid 4045] [client 165.245.179.127:34862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americaaborn.com"] [uri "/.git/config"] [unique_id "apTpsVZAJZOtIYtf7uj0BwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-08-31 02:36:13
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-08-31 02:20:05
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
andypiper
2026-08-31 01:01:23
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 00:35:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 165.245.179.127 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 165.245.179.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 20:35:12.054219 2026] [security2:error] [pid 4199:tid 4199] [client 165.245.179.127:49122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ambarsolar.aguasolar.com"] [uri "/.git/config"] [unique_id "apTMQAAdajAQC-V8OQzktQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-31 00:14:28
(1 day ago)
XSS Attempt
Hacking